News Wrap, Coronavirus Edition: WFH Security Woes, Pwn2Own
Threatpost editors discuss this week’s top news stories from COVID-19 themed malware attacks to Pwn2Own updates. Continue reading News Wrap, Coronavirus Edition: WFH Security Woes, Pwn2Own
Author Archives: Lindsey O'Donnell
Covid-19 Spurs Facial Recognition Tracking, Privacy Fears
The coronavirus pandemic is creating a lucrative market for facial recognition manufacturers. But privacy issues need to be top of mind, tech experts warn. Continue reading Covid-19 Spurs Facial Recognition Tracking, Privacy Fears
Cisco Warns of High-Severity SD-WAN Flaws
The high-severity flaws exist in the products using SD-WAN software earlier than Release 19.2.2. Continue reading Cisco Warns of High-Severity SD-WAN Flaws
Cloud Misconfig Mistakes Show Need For DevSecOps
Unit 42 researchers discuss public cloud misconfiguration issues that are leading to breaches of sensitive data. Continue reading Cloud Misconfig Mistakes Show Need For DevSecOps
Trend Micro Fixes Critical Flaws Under Attack
Fixes are now available for five critical and high-severity Trend Micro flaws, two of which are being actively targeted by attackers. Continue reading Trend Micro Fixes Critical Flaws Under Attack
Adobe Discloses Dozens of Critical Photoshop, Acrobat Reader Flaws
An out-of-band Adobe security update addressed critical flaws in Photoshop, Acrobat Reader and other products. Continue reading Adobe Discloses Dozens of Critical Photoshop, Acrobat Reader Flaws
Magecart Cyberattack Targets NutriBullet Website
Researchers warn that a Magecart group has set up skimmers on the blender manufacturer’s website, in hopes of stealing customer payment-card data. Continue reading Magecart Cyberattack Targets NutriBullet Website
APT36 Taps Coronavirus as ‘Golden Opportunity’ to Spread Crimson RAT
The Pakistani-linked APT has been spotted infecting victims with data exfiltration malware. Continue reading APT36 Taps Coronavirus as ‘Golden Opportunity’ to Spread Crimson RAT
Microsoft Edge Shares Privacy-Busting Telemetry, Research Alleges
An academic study found Microsoft’s Edge browser to be the least private, due to it sending device identifiers and web browsing pages to back-end servers. Continue reading Microsoft Edge Shares Privacy-Busting Telemetry, Research Alleges
WordPress Plugin Bug in Popup Builder Threatens 100K Websites
The high-severity flaw allows malicious code injection into website pop-up windows. Continue reading WordPress Plugin Bug in Popup Builder Threatens 100K Websites